static_resources:
  listeners:
  - address:
      socket_address:
        address: 0.0.0.0
        port_value: 8099
    filter_chains:
    - filters:
      - name: envoy.http_connection_manager
        config:
          codec_type: auto
          stat_prefix: ingress_http
          route_config:
            name: local_route
            virtual_hosts:
            - name: backend
              domains:
              - "*"
              cors:
                allow_origin:
                - "<%= ssl_helper('http') %>://<%= @config['app']['subdomain'] %>.<%= @config['app']['domain'] %>"
                allow_methods: "PUT, GET, POST"
                allow_headers: "content-type, x-grpc-web"
                filter_enabled:
                  default_value:
                    numerator: 100
                    denominator: HUNDRED
                  runtime_key: cors.www.enabled
              routes:
              - match:
                  <%# prefix: "/api/v2/barong" %>
                  prefix: "/api/v2/dalan"
                route:
                  cluster: barong
                  prefix_rewrite: "/api/v2/"
              - match:
                  prefix: "/api/v2/applogic"
                route:
                  cluster: applogic
                  prefix_rewrite: "/api/v2/"
              - match:
                  prefix: "/api/v2/arke"
                route:
                  cluster: arke
                  prefix_rewrite: "/api/v2/"
              - match:
                  <%# prefix: "/api/v2/peatio" %>
                  prefix: "/api/v2/dena"
                route:
                  cluster: peatio
                  prefix_rewrite: "/api/v2/"
              - match:
                  prefix: "/api/v2/finex"
                route:
                  cluster: finex
                  prefix_rewrite: "/api/v2/"
              - match:
                  prefix: "/admin"
                route:
                  cluster: peatio
              - match:
                  prefix: "/assets/"
                route:
                  cluster: peatio
              - match:
                  prefix: "/api/v2/ranger/public"
                route:
                  cluster: rango
                  prefix_rewrite: ""
                  upgrade_configs:
                    upgrade_type: "websocket"
              - match:
                  prefix: "/api/v2/ranger/private"
                route:
                  cluster: rango
                  prefix_rewrite: ""
                  upgrade_configs:
                    upgrade_type: "websocket"
          http_filters:
          - name: envoy.cors
            typed_config: {}
          - name: envoy.ext_authz
            config:
              with_request_body:
                max_request_bytes: 90000000
                allow_partial_message: true
              http_service:
                authorization_request:
                  allowed_headers:
                    patterns:
                    - exact: cookie
                    - exact: x-auth-apikey
                    - exact: x-auth-nonce
                    - exact: x-auth-signature
                    - exact: x-csrf-token
                    - exact: user-agent
                    - exact: x-forwarded-host
                    - exact: x-forwarded-for
                    - exact: from
                    - exact: x-forwarded-proto
                    - exact: proxy-authorization
                authorization_response:
                  allowed_upstream_headers:
                    patterns:
                    - exact: authorization
                  allowed_client_headers:
                    patterns:
                    - exact: set-cookie
                    - exact: proxy-authenticate
                    - exact: www-authenticate
                    - exact: location
                path_prefix: "/api/v2/auth"
                server_uri:
                  cluster: barong
                  timeout: 1.000s
                  uri: http://barong:8001
          - name: envoy.router
            config: {}
    perConnectionBufferLimitBytes: 10000000
  clusters:
  - name: barong
    connect_timeout: 0.25s
    type: strict_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: barong
        port_value: 8001
  - name: applogic
    connect_timeout: 0.25s
    type: strict_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: applogic
        port_value: 8081
  - name: arke
    connect_timeout: 0.25s
    type: strict_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: arke
        port_value: 8081
  - name: peatio
    connect_timeout: 0.25s
    type: strict_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: peatio
        port_value: 8000
  - name: finex
    connect_timeout: 0.25s
    type: strict_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: finex-api
        port_value: 8080
  - name: rango
    connect_timeout: 0.25s
    type: strict_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: rango
        port_value: 8080
admin:
  access_log_path: "/dev/null"
  address:
    socket_address:
      address: 0.0.0.0
      port_value: 9099